Certificate has expired

Hi, I hit error from logstash that was unable to connect to ES:

Unable to retrieve version information from Elasticsearch nodes. certificate has expired

My clusters are installed from Debian packages. Please give me most easy way that can I handle this problem. My clusters are ELK 8.5+. Yesterday I had to reinstall whole cluster because following some tutorials I break everything... Thank you in advance.

Best would be to make 10-15y certificate / extend it. This is LAN communication, however I don't want disable certificates in case of MiTM. Currently certificates are only for 2y, so my problem will back few times in following year :frowning:

I am not sure if I just hit this bug? Public HTTP Secret may hold expired CA · Issue #5621 · elastic/cloud-on-k8s · GitHub - my ELK version was 8.5.2